This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft File: 977D89E37F6F6C3815B2BC731E694AB878F26F30.mft (raw, json) Hash identifier: kOrt6alpyX0Aa00PYeZweP5ewn4/cTSLM1fcHBG9fqs= Subject key identifier: 34:AA:2E:FF:55:45:FC:66:5A:2F:CD:F7:73:BC:60:52:55:69:C0:89 Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 Certificate issuer: /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Certificate serial: 10AA32266C2BD456A37CCE665FFDBDAA0EF9C560 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft Manifest number: 01F4 Signing time: Sun 14 Dec 2025 23:31:20 +0000 Manifest this update: Sun 14 Dec 2025 23:26:20 +0000 Manifest next update: Thu 18 Dec 2025 10:02:20 +0000 Files and hashes: 1: 3130332e33312e34332e302f32342d3234203d3e2039333431.roa (hash: uM0XA0AM+x7njeHld4x4WvIPIQYCBW6QBEs97/wT47g=) 2: 977D89E37F6F6C3815B2BC731E694AB878F26F30.crl (hash: AvHB4VM/y17CWfmF5w8vEmEgBoDz10yROew6iklJbWY=) 3: 3130332e33312e34322e302f32332d3233203d3e2039333431.roa (hash: stIIdICFAUmmjPJbZPuus0zTsstOOiSfpPEmNfACiJs=) 4: 3130332e33312e34322e302f32342d3234203d3e2039333431.roa (hash: j8MhQFCNNpgWTqqvo4wUA4sj1OS1sCETyG/kmulGJXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Dec 2025 10:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:aa:32:26:6c:2b:d4:56:a3:7c:ce:66:5f:fd:bd:aa:0e:f9:c5:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30 Validity Not Before: Dec 14 23:26:20 2025 GMT Not After : Dec 18 10:02:20 2025 GMT Subject: CN=34AA2EFF5545FC665A2FCDF773BC60525569C089 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a2:17:85:1e:73:2f:b9:21:92:e2:c2:f4:46: f3:2a:0b:de:37:b9:fe:fd:c1:df:45:32:8e:fb:a3: 87:0b:b3:1d:5f:c1:89:39:7b:79:a7:dd:1e:e9:18: 77:c8:11:d5:57:5c:8a:9b:cc:f9:a9:f6:3c:12:6e: e9:d7:62:4b:89:e6:1d:18:13:21:c7:7f:bb:28:8a: 36:53:34:4b:3a:88:b9:5c:7e:8a:e8:a5:68:97:ef: 2a:7b:c1:04:43:c6:7f:7c:90:c4:b9:d5:d8:6c:a8: 82:a6:39:90:70:a5:53:bc:02:38:64:49:74:8f:e9: 89:93:99:f0:20:ce:59:2a:a9:77:55:fe:a5:9c:7d: 2d:a7:84:13:33:08:31:3d:b9:26:4a:f6:d9:db:b7: 88:9f:4d:1d:60:2d:aa:0d:1b:42:36:6c:83:95:f7: c8:6a:d2:e0:28:96:51:6c:47:ef:da:2b:52:3f:4a: 67:ec:e7:99:07:4f:c3:23:c0:7a:65:c1:b5:a8:d4: a6:0e:99:49:a4:b1:b8:b5:fe:70:7e:68:e6:8c:55: 18:0e:5e:dc:d0:e4:30:da:74:3a:63:15:c2:7f:bd: 42:85:01:02:e0:10:94:0d:89:e5:70:cf:2f:80:4c: 11:b3:68:78:7d:e4:55:ed:71:11:62:17:ac:7d:8f: d9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:AA:2E:FF:55:45:FC:66:5A:2F:CD:F7:73:BC:60:52:55:69:C0:89 X509v3 Authority Key Identifier: keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:e5:66:5a:18:99:2a:05:7e:4b:80:c6:6b:db:a1:7b:ea:e3: 66:3e:2e:4d:c4:19:93:25:01:4e:80:2d:ff:69:9b:a0:b5:e8: 90:77:9e:97:99:82:33:b8:2e:ad:4d:cb:cc:ee:30:43:f7:d9: 0b:cc:52:76:d5:12:a4:9e:2d:4a:dd:f9:e9:91:a0:5b:6e:95: 55:14:65:f2:f1:99:0c:09:51:f7:22:f3:70:15:4c:c7:6b:cd: 4c:a6:75:c6:97:92:44:2e:5d:c5:b9:e0:28:86:ba:33:7b:74: 02:1d:c7:f4:91:73:6e:99:90:fb:d7:a9:0b:63:db:ad:30:1e: c7:2c:67:bc:d9:ea:09:04:78:87:3c:b4:3b:c5:cd:cf:f7:50: 17:32:e1:69:8e:cd:82:94:5c:b4:ca:a3:15:db:47:d2:84:e9: f8:bf:d0:f8:55:26:68:53:19:4f:af:3e:f3:9c:2e:f0:91:98: 46:7a:22:6a:51:86:2f:f0:4e:b0:2b:29:94:d0:3c:03:a4:7e: 7e:e3:9e:46:fa:1d:bd:8e:f2:4c:ad:de:97:35:c5:55:d6:2f: ba:d9:b1:9a:8e:41:5e:7c:89:ce:36:05:45:c8:de:9a:9c:6d: 97:72:53:00:b4:75:7d:57:34:8d:ea:d0:1c:78:3f:67:4e:a5: b3:f2:73:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKoyJmwr1FajfM5mX/29qg75xWAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3 OEYyNkYzMDAeFw0yNTEyMTQyMzI2MjBaFw0yNTEyMTgxMDAyMjBaMDMxMTAvBgNV BAMTKDM0QUEyRUZGNTU0NUZDNjY1QTJGQ0RGNzczQkM2MDUyNTU2OUMwODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnoheFHnMvuSGS4sL0RvMqC943 uf79wd9FMo77o4cLsx1fwYk5e3mn3R7pGHfIEdVXXIqbzPmp9jwSbunXYkuJ5h0Y EyHHf7soijZTNEs6iLlcforopWiX7yp7wQRDxn98kMS51dhsqIKmOZBwpVO8Ajhk SXSP6YmTmfAgzlkqqXdV/qWcfS2nhBMzCDE9uSZK9tnbt4ifTR1gLaoNG0I2bIOV 98hq0uAollFsR+/aK1I/Smfs55kHT8MjwHplwbWo1KYOmUmksbi1/nB+aOaMVRgO XtzQ5DDadDpjFcJ/vUKFAQLgEJQNieVwzy+ATBGzaHh95FXtcRFiF6x9j9nXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNKou/1VF/GZaL833c7xgUlVpwIkwHwYDVR0j BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy NkYzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi YTktMDRiZWRkYzViYzI2LzAvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRB Qjg3OEYyNkYzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3lZloYmSoFfkuAxmvboXvq42Y+Lk3EGZMl AU6ALf9pm6C16JB3npeZgjO4Lq1Ny8zuMEP32QvMUnbVEqSeLUrd+emRoFtulVUU ZfLxmQwJUfci83AVTMdrzUymdcaXkkQuXcW54CiGujN7dAIdx/SRc26ZkPvXqQtj 260wHscsZ7zZ6gkEeIc8tDvFzc/3UBcy4WmOzYKUXLTKoxXbR9KE6fi/0PhVJmhT GU+vPvOcLvCRmEZ6ImpRhi/wTrArKZTQPAOkfn7jnkb6Hb2O8kyt3pc1xVXWL7rZ sZqOQV58ic42BUXI3pqcbZdyUwC0dX1XNI3q0Bx4P2dOpbPyc8c= -----END CERTIFICATE-----Generated at Mon Dec 15 21:56:04 2025 by rpki-client